Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/4fd4fa78-7e3e-3862-af57-a4934092604d.roa
File:                     4fd4fa78-7e3e-3862-af57-a4934092604d.roa (raw, json)
Hash identifier:          0HwbM3XmA9y1pIpqkoHFLy7F8cB9Jt3yJv1acje91i0=
Subject key identifier:   84:7E:A0:49:44:DE:33:96:F4:01:11:EA:6C:A6:DB:32:A0:E7:3C:F8
Certificate issuer:       /CN=b267d832-cb05-4c68-a5ce-ba4645db35e0
Certificate serial:       010D0C9F43285844FD160B0BBC56FAF5F469B080
Authority key identifier: DA:B9:62:03:58:48:87:2F:D3:32:C7:50:9B:2C:71:08:2F:5E:A8:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/4fd4fa78-7e3e-3862-af57-a4934092604d.roa
Signing time:             Fri 23 Feb 2024 16:43:04 +0000
ROA not before:           Fri 23 Feb 2024 16:43:04 +0000
ROA not after:            Thu 23 May 2024 15:43:04 +0000
asID:                     55066
IP address blocks:        208.82.122.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fd:16:0b:0b:bc:56:fa:f5:f4:69:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b267d832-cb05-4c68-a5ce-ba4645db35e0
        Validity
            Not Before: Feb 23 16:43:04 2024 GMT
            Not After : May 23 15:43:04 2024 GMT
        Subject: CN=dc6f1679-c87c-4f69-b507-e145e9079068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ac:b1:ac:2e:d0:0b:88:75:d3:d0:a7:d2:cf:
                    c5:3e:12:93:c9:76:04:c2:70:2e:72:89:da:14:68:
                    f1:76:82:c0:db:44:5c:a4:c1:5c:91:72:37:34:0c:
                    c7:23:ec:c7:b8:5c:7b:4e:18:f7:43:d9:32:2f:d7:
                    cb:9b:4d:5a:85:cc:bf:87:d0:8e:0e:a9:9d:ee:04:
                    90:c2:63:a6:3c:61:20:d1:97:cd:07:a6:d3:71:d5:
                    4b:fa:f6:13:5b:e9:db:7e:41:01:f8:61:19:81:ac:
                    e7:91:d7:9e:21:3b:ef:f7:64:b2:13:ad:8c:b5:39:
                    7c:1e:86:6d:22:55:41:ec:e8:86:d5:1a:20:07:03:
                    15:64:05:3d:20:a7:9d:67:40:ba:b4:16:30:a8:48:
                    ce:db:4b:fa:58:e9:39:3f:5d:40:e8:53:9f:9c:5a:
                    03:06:aa:04:98:7a:d9:3c:bf:06:bd:c8:de:6b:43:
                    b8:b3:7c:be:5e:6d:71:32:39:fa:18:35:ee:24:d4:
                    84:f5:b2:74:e7:35:25:75:b1:8e:8b:17:28:4b:37:
                    c5:c3:e8:d0:15:73:2d:af:69:14:ad:1e:60:73:96:
                    5d:5e:69:0e:73:ec:76:ef:16:79:06:55:6c:d8:17:
                    5a:81:3b:83:00:aa:c3:4d:2e:0e:9a:44:b0:8f:14:
                    33:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:7E:A0:49:44:DE:33:96:F4:01:11:EA:6C:A6:DB:32:A0:E7:3C:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/4fd4fa78-7e3e-3862-af57-a4934092604d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.crl

            X509v3 Authority Key Identifier:
                keyid:DA:B9:62:03:58:48:87:2F:D3:32:C7:50:9B:2C:71:08:2F:5E:A8:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.82.122.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:ed:19:44:8b:c5:9e:cc:2c:28:9a:95:f3:c6:c7:3f:8b:ed:
         9f:02:02:d6:cb:54:b8:16:3c:19:93:6f:3d:9e:4b:38:b1:11:
         65:2d:cb:2a:58:86:f4:d9:ff:1a:33:0c:85:4e:3c:d9:64:c7:
         ef:05:96:19:1b:47:f9:e6:2d:cf:8b:fc:48:0c:01:e7:c2:e4:
         d0:e0:d3:ed:31:dc:7c:20:00:78:23:65:b6:f5:96:18:ea:ac:
         33:bf:28:37:c3:df:50:80:e6:7d:e5:db:2f:e5:0f:ac:ff:86:
         27:f6:c5:fb:c1:3b:91:31:8c:96:9c:af:30:a4:cc:12:6f:a1:
         46:45:d4:4b:c8:8b:e1:a8:2c:c7:b0:6c:bc:93:17:49:86:8b:
         1d:71:2e:f2:f2:b5:93:0e:8f:04:3a:e2:46:1c:55:16:29:39:
         ef:43:c8:cb:7f:27:12:ca:f7:68:fd:19:5c:32:19:ac:01:ae:
         fa:1f:33:8e:a3:0c:5b:bc:c9:e3:3a:9c:34:5a:5d:d4:68:10:
         76:7c:ca:a6:7d:3a:fd:af:c4:34:6d:0b:6f:0e:3a:3a:a9:5c:
         50:88:8a:b4:8f:75:11:40:60:2e:97:61:6f:1e:e1:3f:5e:03:
         92:26:2d:3c:da:b9:04:0c:83:1a:ef:28:a7:46:ef:7b:9b:4b:
         9c:7c:a4:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:00:59 2024 by rpki-client on console-fra.rpki-client.org